Malware

Malware encompasses viruses, ransomware, trojans, spyware, worms, and other malicious programs. It is one of the most common tools used by attackers across all stages of an attack. Malware detection and analysis is a core SOC function. Understanding the type, behavior, and origin of malware found in an environment is essential for scoping the full impact of a compromise and executing an effective remediation.